Minimalist example of CORS in raw node.js

Better fix for #45